Social Warfare < 4.3.1 - Subscriber+ Post Meta Deletion. AJAX actions lack authorisation, enabling authenticated users to delete post meta and reset access tokens
Reporter | Title | Published | Views | Family All 6 |
---|---|---|---|---|
Cvelist | CVE-2023-0402 | 19 Jan 202314:07 | – | cvelist |
Prion | Authorization | 19 Jan 202315:15 | – | prion |
Vulnrichment | CVE-2023-0402 | 19 Jan 202314:07 | – | vulnrichment |
Patchstack | WordPress Social Warfare Plugin <= 4.3.0 is vulnerable to Broken Access Control | 6 Jan 202300:00 | – | patchstack |
NVD | CVE-2023-0402 | 19 Jan 202315:15 | – | nvd |
CVE | CVE-2023-0402 | 19 Jan 202315:15 | – | cve |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo